255651
|
- |
|
scipter.ch
|
gastebuch
|
PHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter.
|
NVD-CWE-Other
|
CVE-2007-1130
|
2017-10-11 10:31 |
2007-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
255652
|
- |
|
scripter.ch
|
sinapis_forum
|
PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter.
|
NVD-CWE-Other
|
CVE-2007-1131
|
2017-10-11 10:31 |
2007-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
255653
|
- |
|
scripter.ch
|
fcring
|
PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the s_fuss parameter.
|
NVD-CWE-Other
|
CVE-2007-1133
|
2017-10-11 10:31 |
2007-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
255654
|
- |
|
pyrophobia
|
pyrophobia
|
Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) act or (2) pid parameter to the top-level URI (index.ph…
|
CWE-22
Path Traversal
|
CVE-2007-1152
|
2017-10-11 10:31 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
255655
|
- |
|
common_controls_replacement_project
|
browsedialog_server
|
A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) vi…
|
NVD-CWE-Other
|
CVE-2007-1162
|
2017-10-11 10:31 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
255656
|
- |
|
webspell
|
webspell
|
SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter, a different vector than CVE-2007-1019, …
|
CWE-89
SQL Injection
|
CVE-2007-1163
|
2017-10-11 10:31 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
255657
|
- |
|
dbscripts
|
dbguestbook
|
Multiple PHP remote file inclusion vulnerabilities in DBGuestbook 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the dbs_base_path parameter to (1) utils.php, (2) guestbook.php…
|
CWE-94
Code Injection
|
CVE-2007-1165
|
2017-10-11 10:31 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
255658
|
- |
|
dzcp
|
dev\!l\'z_clanportal
|
inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter.
|
CWE-200
Information Exposure
|
CVE-2007-1167
|
2017-10-11 10:31 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
255659
|
- |
|
dzcp
|
dev\!l\'z_clanportal
|
This vulnerability is addressed in the following product release:
1.4.6
|
CWE-200
Information Exposure
|
CVE-2007-1167
|
2017-10-11 10:31 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
255660
|
- |
|
bell_labs
|
plan_9
|
Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstr…
|
NVD-CWE-Other
|
CVE-2007-1189
|
2017-10-11 10:31 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|